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Can you reliably send information down a telegraph wire that doesn't always transmit sig- 
nals correctly? Claude Shannon put classical information theory on a firm footing when he 
showed that you can correct for transmission errors as long as there is some tiny correlation 
between what gets sent and what is received. What's more, Shannon quantified how much 
information could be reliably communicated. Classical information theory was intimately en- 
twined with communication from the onset. The birth of quantum information theory began 
from an apparently different direction - cryptography - when it was realized that if you can 
reliably send someone a system in a quantum state, then you can use those states to exchange 
private messages that cannot be cracked by even the most powerful computer ©. This cannot 
be done classically without meeting beforehand to exchange a key that is as long as the private 
messages you want to send. The field of quantum cryptography is now rather advanced, but 
surprisingly, we are still wrestling with the corresponding question that was so central to clas- 
sical information theory: How much quantum information can we reliably send down a noisy 
channel. On page 1812 of this issue ©, Smith and Yard have discovered that we may be further 
from answering this question than we think, but that intriguing clues might come from the very 
place that initially sparked our interest in quantum information: cryptography. 

Classically, a telegraph wire that is so noisy that no information can be reliably sent through, 
is useless. These are called zero-capacity channels. But what about the quantum case? What 
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about a fiber-optic cable which is so noisy it cannot be used to send any quantum state reliably? 
Because our intuition tends to be classical, it was generally believed that a channel that cannot 
convey quantum information would also be useless. Yet a few years ago, the Horodecki brothers 
and I found that although these channels cannot be used to send quantum states, they can be 
used to send classical private messages. Indeed, one can classify all states that, if shared over 
some channel, are private @. What's more, this privacy is verifiable, which means practical 
cryptography can be performed over these zero capacity fibers ©. The belief that quantum 
cryptography required being able to reliably send quantum states turned out to be wrong. 

Now, Smith and Yard, using results from ©, have shown a remarkable property of these 
zero-capacity quantum channels that can send private messages: They can be combined with 
another channel that also has zero-capacity and these two zero-capacity channels can be used to 
convey quantum information. It's a bit like finding out that + = 1 . Each channel individually 
is useless for sending quantum information, but when used together, they can be used to reliably 
send a quantum system in any state. 

Despite how perplexing this result appears from a classical perspective, there is a fairly 
simple way to illustrate it. setting from that considered by Smith and Yard. Let us start with the 
main idea behind cryptography. Consider two parties, Alice and Bob, who can communicate 
classically using a telephone and exchange quantum states - for example, polarized photons 
or qubits. These are represented by vectors in a linear superposition of two states, |0) and 
|1), so that horizontal polarization of a photon is |0), the vertical polarization is |1), and linear 
superposition can give rotations to any angle. Imagine they can succeed in sharing a maximally 
entangled quantum state whose wave function |^ ) can be represented as: 



which is in a superposition of them having their qubits in the 1 00) state, or in the |11) state, 




(1) 
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with Alice (A) possessing one of the qubits and Bob (B) in possession of the other. This state 
is pure, meaning that nothing in the external world can be correlated with it. As a result, Alice 
and Bob can measure in the |0), |1) basis to obtain a string of correlated and secret bits (7) (their 
measurement outcomes will be that Alice and Bob each obtain or they each obtain 1). This 
string can be used to share a private message. Any channel which can be used to share |-0 O ) can 
be used to share any other state, and is said to have a positive channel capacity. Likewise, if 
they can share the state 

Hi) = (|00)ab - |H)^b)/V2 (2) 

which is also maximally entangled but has negative phase, then they can also share both a 
private message, and send quantum states. Now, consider a channel that half of the time results 
in |-0o) being shared, and the other half of the time, results in being shared. One can show 
that this channel can only send classical messages since the state that is shared can be rewritten 

as 

P = ^(|00) A b(00Ub + |11)ab(HUb) (3) 

which is just a classically correlated state which can be created using only a telephone. This 
channel cannot create entanglement unless |^ ) is shared more often than 1^) (or visa versa). 
But, to make it more interesting, the channel also sends a flag - an additional state which labels 
which of the two maximally entangled states has been sent: 

P = \(\^)(^\®A>b> + \^i)^i\®t\, b ,) . (4) 

If Alice and Bob can distinguish the t\, b , flag from the t\, b , flag by performing measurements 
on them, then they will know which of the two entangled states they share and they can then 
send private messages or quantum states as before. They can even perform a correction to 
the state to convert into \ipo). For example, the flags t^, b , and t\, b , could be orthogonal 
states |0) B /(0| B ' an d 1 1) b' (1 1 b> held by Bob alone, and by measuring them, he will know which 
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maximally entangled state he shares with Alice, and can act a phase operator az in the case they 
share |-?/>i). 

As it turns out, there exist flags that can be completely distinguished when Bob holds the 
entire flag, yet are arbitrarily difficult to distinguish when Alice and Bob hold different parts 
of the flag and must perform measurements on them in separated labs ©. In such cases, they 
will hardly ever know whether they share |^o) or l^i)* an d their ability to send quantum states 
to each other is arbitrarily close to zero (one can make it exactly zero by adding small errors). 
Their inability to distinguish the flags, means that from the point of view of sending quantum 
states, they might as well be sharing the state of Equation © rather than that of Equation ©. 
However, this state is still useful for sending private messages, because Alice and Bob can still 
just measure as they did before in the |0), |1) basis to obtain a secret key. An eavesdropper 
may know whether they share |^o) or l^i) but not whether they obtained 1 00) or |11) after 
measurement. The eavesdropper may conceivable be holding the remainder of a pure state 
which reduces to either Equations © or (HJ) on Alice and Bob, but the existence of the flags 
restricts what she can learn about Alice and Bob's local states in the case of Equation ©. Thus 
channels that produce states close to Equation (HJ) can be used to share private messages, but 
they cannot be used to send quantum information - they have zero quantum capacity. 

Now consider another zero-capacity channel, an erasure channel, that, with probability 1/2 
lets the quantum state through perfectly, and the rest of the time it erases the state; the receiver 
Bob knows an error occurred because he will be sent the error state |e). Such a channel turns 
out to be useless by itself for sending quantum information, but if Alice first uses the previous 
zero-capacity private channel and then puts her half of the flag down the erasure channel, then 
half of the time, Bob can combine Alice's part of the flag that he receives from this channel, with 
the other half that he received from the zero-capacity private channel. He can then distinguish 
the flag. So half of the time, he will know whether they share j^o) or IV'i) an ^ he can perform 



4 



a correction so that they both share the |^o) state. This means that 3/4 of the time, Alice and 
Bob share |^o) instead of \if)i). This is significantly greater than half the time, and enough 
to create entanglement and get a positive channel capacity. One can verify that the resulting 
shared state pab has positive coherent information © I C (A)B) := S(B) — S(AB) with S(X) 
the von-Neumann entropy S(X) = —Tipx log px- which gives the quantum capacity in the 
limit of many uses of the channel. 

By using both the zero-capacity private channel, and the zero-capacity erasure channel to- 
gether, Alice and Bob can always share the |^ ) state. In the case above, the inputs that Alice 
sends through the two channels are not even entangled, but only classically correlated. What's 
more, this procedure can be easily generalized. All cryptographic protocols must distill the pri- 
vate states of ©, and the above protocol can be adapted to work for all of them. From a more 
technical point of view, Alice sends Bob the shield through the erasure channel and when the 
shield gets through Bob can perform untwisting to yield \ipo) ©. I.e. all private channels or 
protocols which yield a private bit upon measurement, can be thought of as sharing states of the 
form 

P = U\tfj }{H® PA'B'Ul (5) 

with U = |0 S )(0 B | <g) I + <E> Vab and Vab a unitary. Since this state is the result of 

Alice and Bob using the private channel, Alice need only send her share of pA' b 1 (the shield) 
down the erasure channel, and when Bob gets it, he can perform W to untwist the state so that 
they share l^o)- 

This result raises many questions, not the least of which is what this work may say about 
the quantum capacity. We do not know whether the procedure for activating a private channel 
is optimal, whether every channel that has zero-capacity (but is not classical) can have positive 
capacity when combined with another zero-capacity channel, or even whether every such zero- 
capacity channel is also a private channel. Whatever the answers, it is clear is that the structure 
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of quantum information theory is much richer than most of us ever anticipated. 
Acknowledgements: Thanks to Ashley Lebner and Rob Spekkens for helpful discussions on 
titles and cartoons. 
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Fig. 1. Quantum blindsight. "You appear to be blind in your left eye and blind in your right 
eye. Why you can see with both eyes is beyond me..." (Figure not included. Sorry, but its a 
cartoon of an optometrist examining a cat.) 
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